As time progresses, the need for more secure applications grows exponentially. The different types of sensitive information that is being transferred virtually has sparked a rise in systems that leverage blockchain. Different sectors are beginning to use this disruptive technology to evaluate the risks and benefits. Sectors like finance, medicine, higher education, and wireless communication have research regarding blockchain. Futhermore, the need for security standards in this area of research is pivotal. In recent past, several attacks on blockchain infrastructures have resulted in hundreds of millions dollars lost and sensitive information compromised. Some of these attacks include DAO attacks, bZx attacks, and Parity Multisignature Wallet Double Attacks which targeted vulnerabilities within smart contracts on the Ethereum network. These attacks exposed the weaknesses of current smart contract development practices which has led to the increase in distrust and adoption of systems that leverage blockchain for its functionality. In this paper, I identify common software vulnerabilities and attacks on blockchain infrastructures, thoroughly detail the smart contract development process and propose a model for ensuring a stronger security standard for future systems leveraging smart contracts. The purpose for proposing a model is to promote trust among end users in the system which is a foundational element for blockchain adoption in the future.
翻译:随着时间推移,对更安全应用的需求呈指数级增长。不同类型敏感信息在虚拟环境中的传输,引发了基于区块链系统的兴起。各行业正开始评估这种颠覆性技术的风险与收益,其中金融、医疗、高等教育及无线通信领域均已开展区块链相关研究。此外,该研究领域对安全标准的需求至关重要。近年来,针对区块链基础设施的多起攻击已导致数亿美元损失及敏感信息泄露,包括针对以太坊网络智能合约漏洞的DAO攻击、bZx攻击及Parity多重签名钱包双重攻击。这些攻击暴露了当前智能合约开发实践的缺陷,导致用户对区块链功能系统的信任度下降及采用率降低。本文识别了区块链基础设施中的常见软件漏洞与攻击方式,详细阐述了智能合约开发流程,并提出一种模型以确立未来基于智能合约系统的更强安全标准。提出该模型旨在增强终端用户对系统的信任,这是未来区块链普及的基础要素。